4 replies to this topic

[T_Bird]

First time posting here so forgive any errors I may make. Ok I can't seem to remove this thing c:\windows\assembly\tmp\u\800000cb.@ Family Name: Trojan.Win32.Generic!BT . I've ran ad-aware several times and it says it's removed it and I need to reboot but everytime I do and do another check it comes back. I believe I've followed all the first steps on the read before posting and have uploaded the 2 txt files requested. Thanks for the help in advance as this thing is really starting to get under my skin..lol

Attached Files

•  OTL.Txt   278.91K   261 downloads
•  Extras.Txt   38.36K   137 downloads

[Blade81]

Hi,

Download DDS and save it to your desktop from here or here or here.
Disable any script blocker, and then double click dds file to run the tool.

• When done, DDS will open two (2) logs:
  • DDS.txt
  • Attach.txt
• Save both reports to your desktop. Post them back to your topic.

[T_Bird]

Here you go and sorry it took a while to reply I nodded off to sleep but anyway thanks again

Attached Files

•  Attach.zip   1.97K   271 downloads
•  DDS.txt   23.47K   177 downloads

Edited by T_Bird, 02 July 2011 - 01:32 PM.

[Blade81]

Hi


Please visit this webpage for download links, and instructions for running ComboFix tool:

http://www.bleepingc...to-use-combofix

Please ensure you read this guide carefully first.

Please continue as follows:

• Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix, link
  Remember to re-enable them afterwards.
  
  
• Click Yes to allow ComboFix to continue scanning for malware.

When the tool is finished, it will produce a report for you.

Please include the following reports for further review, and so we may continue cleansing the system:

C:\ComboFix.txt
New dds log.

A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix. This tool is not a toy and not for everyday use.

[Blade81]

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter.

Everyone else please begin a New Topic.

Thank You !